[Secure-testing-commits] r12004 - doc

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2009-06-01 10:53:06 +0000 (Mon, 01 Jun 2009)
New Revision: 12004

Modified:
   doc/narrative_introduction
Log:
docs on bugnum linking


Modified: doc/narrative_introduction
===================================================================
--- doc/narrative_introduction	2009-06-01 10:44:45 UTC (rev 12003)
+++ doc/narrative_introduction	2009-06-01 10:53:06 UTC (rev 12004)
@@ -436,6 +436,28 @@
 which they may have forgotten about.
 
 
+Tracking of security bugs in the BTS and linking them to a user tag by CVE
+--------------------------------------------------------------------------
+
+There's an automated tagging of security-related bugs to CVE IDs through
+the user tag security for the user debian-security at lists.debian.org
+
+All bugs added to the tracker are automatically tagged. You can use
+the search
+http://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=security;users=debian-security@lists.debian.org;exclude=tracked 
+to find all bugs not yet present in the tracker.
+
+All bug numbers added to the tracked are automatically associated
+to the relevant user tag.
+
+If you checked an issue which doesn't need to be added to the tracked
+(e.g. because it's not security-relevant or otherwise bogus you can either
+remove the security tag from the bugs or sent a mail to control at bugs.debian.org
+with the following content:
+
+user secure-testing-team at lists.alioth.debian.org
+usertag $BUGNUM + tracked
+
 IRC Channel
 -----------
 We hang-out on #debian-security on OFTC, stop by the IRC channel if